News for hackers. Stuff that matters.

A comment on Canary Tokens. Parent comment

Re:Canary Tokens by xorcist on Saturday December 31, 2022 @05:40AM (#34195252)
Not to mention the obvious security implications should any of the supported icon image format decoders ever have any issues.
[ Parent | on HN ]
Re:Canary Tokens by rtev on Saturday December 31, 2022 @09:48PM (#34203083)
It’s worse than that, unfortunately. Windows happily authenticates with an NTLMv2 hash using this method as well - requires zero interaction.
[ Parent | on HN ]